actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 59a4f4c4ba Fixing typo in README.md Federico Builes 2022-11-09 13:24:07 +01:00
  • bf8cfe8b38 Linting, adding dist files. Federico Builes 2022-11-09 13:22:33 +01:00
  • ae538ebe32 Linting and whitespace. Smol rename. Federico Builes 2022-11-09 13:17:12 +01:00
  • b4126ce983 Shuffle things around. Federico Builes 2022-11-09 13:16:53 +01:00
  • 418ae59d51 Replace TODO with instructions for getting PAT. Federico Builes 2022-11-08 17:51:31 +01:00
  • c38007a979 Don't abbreviate repo in docs. Federico Builes 2022-11-08 17:45:23 +01:00
  • ebe5527e72 Fix readme typo cnagadya 2022-11-08 11:23:48 +00:00
  • 1589654682 Add dist changes cnagadya 2022-11-08 11:16:48 +00:00
  • f0ff0b670a Rename config token > external-repo-token cnagadya 2022-11-08 11:16:26 +00:00
  • 336da03de2 Update empty allow-licenses tests cnagadya 2022-11-08 11:15:36 +00:00
  • 78565a954f Dont merge config lists cnagadya 2022-11-08 10:52:30 +00:00
  • 3c73a622ba Fix config-file tests cnagadya 2022-11-08 09:53:36 +00:00
  • 7a42af0f2f Merge pull request #320 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.4 Federico Builes 2022-11-08 10:40:36 +01:00
  • abfd4a1fc7 Bump eslint-plugin-jest from 27.1.3 to 27.1.4 dependabot[bot] 2022-11-08 09:39:22 +00:00
  • 40e460b464 Merge pull request #316 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.1 Federico Builes 2022-11-08 10:38:41 +01:00
  • 9f1bc9b354 Bump @typescript-eslint/parser from 5.42.0 to 5.42.1 dependabot[bot] 2022-11-08 09:38:34 +00:00
  • 774bd6c1d5 Merge pull request #318 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.1 Federico Builes 2022-11-08 10:37:41 +01:00
  • f7686f8c21 Merge pull request #317 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.1 Federico Builes 2022-11-08 10:36:16 +01:00
  • 688e92b5e5 Bump eslint-plugin-github from 4.4.0 to 4.4.1 dependabot[bot] 2022-11-08 07:35:47 +00:00
  • 7ce779229f Merge pull request #319 from actions/dependabot/npm_and_yarn/eslint-8.27.0 Federico Builes 2022-11-08 08:34:38 +01:00
  • 543eecb644 Bump eslint from 8.26.0 to 8.27.0 dependabot[bot] 2022-11-08 01:17:47 +00:00
  • a7ec2eb771 Bump @typescript-eslint/eslint-plugin from 5.42.0 to 5.42.1 dependabot[bot] 2022-11-08 01:17:25 +00:00
  • 13455c7175 Merge array config options cnagadya 2022-11-07 17:57:05 +00:00
  • 6d941b396a Fix inconsistencies due to zod defaults / partials mixup cnagadya 2022-11-07 17:08:00 +00:00
  • 49ed3f2876 Merge lists in configs instead of overwritting them cnagadya 2022-11-07 12:33:54 +00:00
  • b55cddb69d Use config-file for both remote and local config-files cnagadya 2022-11-07 12:12:03 +00:00
  • dcdeb7de77 Remove redundant skips cnagadya 2022-11-04 16:12:05 +00:00
  • b4a2fbfa16 Complete functionality for handling remote config file cnagadya 2022-11-04 14:51:41 +00:00
  • 97e5a607ba Handle getContent response as is cnagadya 2022-11-04 10:08:00 +00:00
  • 3b410dc4ad Load remote config file cnagadya 2022-11-04 09:05:45 +00:00
  • 683cbc4872 Merge branch 'main' into external-repo-config Federico Builes 2022-11-01 08:11:26 +01:00
  • 2f696d8c7a Merge pull request #314 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 Federico Builes 2022-11-01 08:10:28 +01:00
  • 1a9033d563 Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0 dependabot[bot] 2022-11-01 07:10:21 +00:00
  • ad6e320da1 Merge pull request #313 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.0 Federico Builes 2022-11-01 08:09:22 +01:00
  • 3d86825394 Bump @typescript-eslint/parser from 5.41.0 to 5.42.0 dependabot[bot] 2022-11-01 01:49:12 +00:00
  • 10dc05ba09 Merge pull request #311 from ericcornelissen/308-disable-license-or-vuln Federico Builes 2022-10-31 07:56:37 +01:00
  • 04f48dec81 Update __tests__/config.test.ts Federico Builes 2022-10-31 07:55:17 +01:00
  • 77a34f96cc Fixing typo in config.test.ts. dis-vuln Federico Builes 2022-10-31 07:46:08 +01:00
  • bb5c0c7ca0 Merge pull request #312 from actions/dependabot/npm_and_yarn/types/node-16.18.3 Federico Builes 2022-10-31 06:42:09 +01:00
  • 2d7d700469 Bump @types/node from 16.18.2 to 16.18.3 dependabot[bot] 2022-10-31 01:33:50 +00:00
  • f095b5a541 Build and package Eric Cornelissen 2022-10-28 22:25:06 +02:00
  • f54a1f3b74 Document the license-check & vulnerability-check config options Eric Cornelissen 2022-10-28 22:22:55 +02:00
  • 84921e5e4a Simplify Summary summary based on license-check and vulnerability-check Eric Cornelissen 2022-10-28 22:15:44 +02:00
  • c5af7ff272 Prevent disabling all checks Eric Cornelissen 2022-10-28 22:08:55 +02:00
  • 31279d265a Add license-check and vulnerability-check inputs Eric Cornelissen 2022-10-28 21:59:30 +02:00
  • 2532504548 Merge pull request #310 from actions/cn/node-18 Federico Builes 2022-10-28 13:46:26 +02:00
  • cc6d251652 Update contributing guide cnagadya 2022-10-28 09:54:53 +00:00
  • 516e8497ac Add codespace defaults cnagadya 2022-10-28 09:45:19 +00:00
  • 43c5083e6c Node 18 cnagadya 2022-10-28 09:40:46 +00:00
  • fa62a0febc Merge pull request #294 from actions/cn/spdx-licenses Federico Builes 2022-10-28 11:27:18 +02:00
  • e897e8ebdd Add dist folder cn/spdx-licenses cnagadya 2022-10-28 09:25:16 +00:00
  • 216fafaed5 PR feedback cnagadya 2022-10-28 11:23:05 +02:00
  • 0144419c8e Format violations area cnagadya 2022-10-27 16:43:45 +00:00
  • 7b16bd0b54 Add unvalidated changes to summary cnagadya 2022-10-27 16:24:30 +00:00
  • 4525a8c091 Format summary findings cnagadya 2022-10-27 15:41:19 +00:00
  • 72273c9a36 Update dist folder cnagadya 2022-10-27 15:22:00 +00:00
  • 562a2f3c0a Improve summary formatting cnagadya 2022-10-27 15:19:32 +00:00
  • c82c183029 Resolve package-lock conflicts cnagadya 2022-10-27 14:37:08 +00:00
  • 26be1f407e Merge pull request #309 from actions/codespace-actions-dependency-review-action-p79j7j9pxqrh669p cnagadya 2022-10-27 15:43:28 +02:00
  • 022ea02fbb Add unresolved licenses section codespace-actions-dependency-review-action-p79j7j9pxqrh669p cnagadya 2022-10-27 13:09:37 +00:00
  • d6e28cdfae Merge pull request #307 from actions/dependabot/npm_and_yarn/types/node-16.18.2 Federico Builes 2022-10-27 07:34:11 +02:00
  • da3d8af3e3 Bump @types/node from 16.18.0 to 16.18.2 dependabot[bot] 2022-10-27 01:26:35 +00:00
  • 52fa73c086 Update readme licenses sections cnagadya 2022-10-26 10:54:12 +00:00
  • 3baea959cf Fix license test failures cnagadya 2022-10-26 09:05:22 +00:00
  • 782c57b17e Fix config test failures cnagadya 2022-10-21 13:51:02 +00:00
  • ac5ed8754d Use SPDX license expressions cnagadya 2022-10-26 09:01:43 +00:00
  • 024a5a6342 Merge pull request #305 from actions/dependabot/npm_and_yarn/octokit-2.0.10 Federico Builes 2022-10-26 08:49:12 +02:00
  • b2fc686406 Resolving merge conflicts Federico Builes 2022-10-26 08:47:43 +02:00
  • 4ec1d46392 Bump octokit from 2.0.9 to 2.0.10 dependabot[bot] 2022-10-26 06:46:16 +00:00
  • cfef8bfe29 Merge pull request #304 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-4.0.3 Federico Builes 2022-10-26 08:45:28 +02:00
  • bd43b8d1e2 updating dist Federico Builes 2022-10-26 08:45:18 +02:00
  • fced408b87 Bump @octokit/plugin-retry from 3.0.9 to 4.0.3 dependabot[bot] 2022-10-26 01:51:57 +00:00
  • 65f9f50468 Merge pull request #303 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.41.0 Federico Builes 2022-10-25 07:57:41 +02:00
  • a393c83ce5 Bump @typescript-eslint/parser from 5.40.1 to 5.41.0 dependabot[bot] 2022-10-25 05:56:55 +00:00
  • 56163c5659 Merge pull request #302 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.41.0 Federico Builes 2022-10-25 07:56:10 +02:00
  • 5dc2e6e4bb Bump @typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0 dependabot[bot] 2022-10-25 01:44:33 +00:00
  • 0efb1d1d84 bumping to 2.5.1 v2.5.1 v2 Federico Builes 2022-10-24 17:03:38 +02:00
  • d4f6425aa4 Merge pull request #290 from actions/cn/scan_pr Federico Builes 2022-10-24 16:55:54 +02:00
  • 49a61bd9bd Update scripts/scan_pr Federico Builes 2022-10-24 16:54:03 +02:00
  • 06c01e11e8 Update scripts/scan_pr Federico Builes 2022-10-24 16:53:56 +02:00
  • 4538b29c27 Merge pull request #300 from actions/dependabot/npm_and_yarn/eslint-8.26.0 Federico Builes 2022-10-24 07:14:08 +02:00
  • 4153ec555a Merge pull request #299 from actions/dependabot/npm_and_yarn/types/node-16.18.0 Federico Builes 2022-10-24 07:13:59 +02:00
  • 7c8d0843f9 Bump eslint from 8.25.0 to 8.26.0 dependabot[bot] 2022-10-24 01:47:43 +00:00
  • fc00198e43 Bump @types/node from 16.11.68 to 16.18.0 dependabot[bot] 2022-10-24 01:47:19 +00:00
  • 9760f87258 Fix config-file description in action.yml Federico Builes 2022-10-21 17:38:18 +02:00
  • 74c047086c Adding README and action.yml for external config files. Federico Builes 2022-10-21 17:34:20 +02:00
  • 80e573b784 Fixing whitespace. Federico Builes 2022-10-21 14:03:17 +02:00
  • b5c3d1e723 Update scan_pr to support loading an external config YAML file. Federico Builes 2022-10-21 14:00:52 +02:00
  • 7fd272118a Updating scan_pr to support a config file option. Federico Builes 2022-10-21 13:55:52 +02:00
  • 3c9a31f5a0 Updating CONTRIBUTING.md Federico Builes 2022-10-21 13:36:00 +02:00
  • d8fba3fdc1 Remove hardcode file from .gitignore Federico Builes 2022-10-21 13:33:24 +02:00
  • e805dd89e8 Merge branch 'main' into cn/scan_pr Federico Builes 2022-10-21 13:27:09 +02:00
  • 32276cb73d Merge pull request #298 from actions/dependabot/npm_and_yarn/types/node-16.11.68 Federico Builes 2022-10-19 07:49:08 +02:00
  • fe226ac019 Merge pull request #297 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.3 Federico Builes 2022-10-19 07:48:52 +02:00
  • b759175bdb Bump @types/node from 16.11.66 to 16.11.68 dependabot[bot] 2022-10-19 01:34:58 +00:00
  • 6af054f363 Bump eslint-plugin-jest from 27.1.2 to 27.1.3 dependabot[bot] 2022-10-19 01:34:46 +00:00
  • 6f32cb0afd Merge pull request #296 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.1 Federico Builes 2022-10-18 10:05:25 +02:00
  • 2791afab72 Bump @typescript-eslint/parser from 5.40.0 to 5.40.1 dependabot[bot] 2022-10-18 06:54:19 +00:00
  • a8b5c8c24e Merge pull request #295 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.1 Federico Builes 2022-10-18 08:53:31 +02:00
  • 12a250de95 Bump @typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1 dependabot[bot] 2022-10-18 01:26:32 +00:00